‍ ‍

Contact Details

Registered as: The Laverton Healthcare Group Ltd

Data Protection Officer: Dr Vimal Patel

‍E-mail: info@lavertonhealthclinic.co.uk

‍The Laverton Healthcare Group Ltd is a registered data controller. Our Information Commissioner’s Office registration number is ZB926363. This privacy notice sets out our privacy policy for patient data.

‍ ‍

The Laverton Healthcare Group Ltd. (also referred to as Laverton Health Clinic, we, us, our, the practice) keeps medical records confidential and complies with the UK General Data Protection Regulation and Data Protection Act 2018.

We hold your medical record so that we can provide you with safe care and treatment.

‍We will also use your information so that this practice can check and review the quality of the care we provide. This helps us to improve our services to you.

‍With your consent, we will share relevant information from your medical record with your NHS GP, our pathology lab for blood testing, other medical specialists for advice or referral and where required social care and other organisations.

You have the right to object to information being shared for your own care. Please speak to the practice if you wish to object. You also have the right to have any mistakes or errors corrected.

‍Please see our additional privacy information which explains how we use or share your data for purposes other than direct care, such as medical research or service planning and your options for opting out.

‍ ‍

The Type of Personal Information we collect

We currently collect and process the following information about you:

-          Your name, date of birth, address, telephone number, e-mail address

-          Your NHS GP information

-          Information about your medical history, medications, family history, social and lifestyle history and current medical problems

-          Details of medications prescribed by us or other providers

-          Allergies and intolerances

-          Details of examinations by us or other providers

-          Blood test results and results of other investigations performed by us or other providers

-          Information relevant to your health and wellbeing from other people who care for you or know you well or other healthcare professionals

-          Information required to process payments when you book appointments

-          Your browser information when you visit our website

‍ ‍

Where we get the personal information from and why we have it

‍Most of the information we process comes directly from you for one of the following reasons:

‍-          When registering with us as a patient

‍-          During a medical consultation with one of our doctors

We may also receive information about your health from other organisations such as your NHS GP and blood test results from our chosen pathology lab. This information will be stored in your electronic medical record with us.‍ ‍

We use the information:

·       To give direct health or social care to you, our patient ‍

·       To enable appropriate care from another organisation. For example, when a patient agrees to a referral for direct care, from another specialist, relevant information about the patient will be shared with the other healthcare staff to enable them to give appropriate advice, investigations, treatments and/or care. When a patient opts for a blood test, patient identifiable information will be shared with the pathology lab to enable processing of blood samples.

‍·       To check and review the quality of care we provide - This is called audit and clinical governance

·       To investigate complaints.

We share this information with:

·       healthcare professionals and staff in this surgery;

‍·       other specialists (e.g. NHS GP) with your consent

‍·       other organisations involved in the provision of direct care to individual patients with your consent

·       our pathology lab when you opt into blood testing

·       the appropriate organisations, in certain circumstances where there is a risk of serious harm to a person or a serious crime has been committed (e.g. CQC or local safeguarding authority)

‍ ‍

Lawful Basis for Processing Data

These purposes are supported under the following sections of the UK GDPR:

Article 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’; and

‍Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...” 

‍Healthcare staff will also respect and comply with their obligations under the common law duty of confidence.

‍ ‍

How we store your personal Information

‍All your personal information is stored in our electronic patient record system. Your records are only accessible to healthcare professionals working at our practice. All electronic data (including backups) at rest are stored within the United Kingdom.

We use Stripe to enable online payments. Their data processing information and privacy policy is available to read here: https://stripe.com/gb/privacy

We will usually keep any personal data we hold about you for ten years after our last contact with you before we delete it. If we collected the data when you were aged under 18, we will keep it until your 25th birthday, in line with NHS requirements. In exceptional cases we may need to retain personal data for a longer period and will explain our reasons for doing so on request.

‍ ‍

Your data protection rights

Your Right To Object

‍·       You have the right to object to the processing of your personal information in certain circumstances.

·       You have the right to object to information being shared between those who are providing you with direct care.

‍·       This may affect the care you receive – please speak to the practice.

‍·       You are not able to object when information is legitimately shared for safeguarding reasons or when the public interest outweighs your right to confidentiality, for example when a serious crime has been committed.

‍·       In appropriate circumstances it is a legal and professional requirement to share information for safeguarding reasons. This is to protect people from harm - The information will be shared with the local safeguarding service.

Right of access and right to correct:

‍·    You have the right to access your medical record

‍·   You have the right to correct personal information which is inaccurate or a mistake

‍ ·  We are not aware of any circumstances in which you will have the right to delete correct information from your medical record; although you are free to obtain your own legal advice if you believe there is no lawful purpose for which we hold the information and contact us if you hold a different view.

‍

Right to restriction of processing:

You have the right to ask us to restrict the processing of your personal information in certain circumstances. Please contact us if you would like to make a request.

‍

How your information is used for medical research, to plan services and to measure the quality of care

Medical research and service planning

‍·       At present Laverton Health Clinic is not involved in any external research projects.

·        We may use your medical records to carry out research within the practice and publish anonymised data to demonstrate effectiveness of our treatment plans and particular interventions including submitting abstracts or papers for conferences or journals; and

·       help plan our services.

‍Sharing information for these reasons is important because:

·       the use of information from medical records is very useful in developing new treatment plans and interventions;

·       medical researchers use information from medical records to help answer important questions about illnesses and disease so that improvements can be made to the care and treatment patients receive;

‍The following sections of the UK GDPR mean that we can use medical records for research and to check the quality of care we provide

‍·       Article 6(1)(e) – ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.

·       Article 9(2)(a) – ‘the data subject has given explicit consent…’

‍ ·       To check the quality of care (clinical audit):

‍ ·       Article 9(2)(h) – ‘processing is necessary for the purpose of preventative…medicine…the provision of health or social care or treatment or the management of health or social care systems and services...’

‍ ‍

National Data Opt-Out

The National Data Opt-Out allows individuals to opt out of their confidential patient information being used for research and planning purposes beyond their individual care. Laverton Health Clinic does not currently share patient data for purposes where the National Data Opt-Out applies.

‍ ‍

You have the right to object to your confidential information being shared by this practice for medical research and planning purposes. Please speak to the practice if you wish to object.

‍

How your information is shared so that this practice can meet legal requirements

‍ ‍

The law requires Laverton Health Clinic to share information from your medical records in certain circumstances.

‍

We will share information with NHS England, the Care Quality Commission, and local health protection team (or UK Health Security Agency) when the law requires us to do so. Please see below for more information.

We must also share your information if a court of law orders us to do so.

‍

NHS England

·       This practice must comply with the law and will send data to NHS England, for example, when it is told to do so by the Secretary of State for Health under the Health and Social Care Act 2012.

·       More information about NHS England and how it uses information can be found at:

https://www.england.nhs.uk/digitaltechnology/connecteddigitalsystems/health-and-care-data/‍

Care Quality Commission (CQC)

·      The CQC regulates health and social care services to ensure that safe care is provided.

‍·      The law says that we must report certain serious events to the CQC, for example, when patient safety has been put at risk.

‍·      For more information about the CQC see: http://www.cqc.org.uk/

‍ ‍

Public Health

‍·       The law requires us to share data for public health reasons, for example to prevent the spread of infectious diseases or other diseases which threaten the health of the population.

·      We will report the relevant information to local health protection team or the UK Health Security Agency.

‍

For more information about the UK Health Security Agency and disease reporting see: https://www.gov.uk/guidance/notifiable-diseases-and-causative-organisms-how-to-report

‍ ‍

Safeguarding ‍

Sometimes we need to share information so that other people, including healthcare staff, children or others with safeguarding needs, are protected from risk of harm.

These circumstances are rare.

We do not need your consent or agreement to do this.

You can request to see our safeguarding policy by contacting us at info@lavertonhealthclinic.co.uk

How to complain‍ ‍

If you have concerns about how we use your personal data, please contact us directly using the details above and we will investigate your complaint. You also have the right to complain to the Information Commissioner’s Office (ICO).

‍ ‍

How to contact us or the ICO about your data‍ ‍

Please speak to us first if you have any questions or concerns about the way in which we process personal data. You can contact us using the details at the top of this document.

‍You have the right to complain to the ICO if you have a concern about our handling of your personal data which you do not think we can resolve. You can contact the ICO using the details below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

‍

Last update: May 2026

‍ ‍‍ ‍